CVE Vulnerability Database
Search and browse 424,261 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-108375 | HIGH | 8.8 | 0.5% | Oct 13, 2026 | dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates ... |
| CVE-2026-106176 | LOW | 3.8 | 0.2% | Oct 13, 2026 | A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or com... |
| CVE-2026-106175 | LOW | 2.3 | 0.1% | Oct 13, 2026 | A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.8, FortiOS 7.4 all versions, F... |
| CVE-2026-106173 | CRITICAL | 9.8 | 1.0% | Oct 13, 2026 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5... |
| CVE-2026-106172 | MEDIUM | 5.3 | 0.2% | Oct 13, 2026 | A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 thr... |
| CVE-2026-106171 | MEDIUM | 6.1 | 0.7% | Oct 13, 2026 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet F... |
| CVE-2026-106170 | MEDIUM | 4.9 | 0.3% | Oct 13, 2026 | An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5... |
| CVE-2026-105445 | CRITICAL | 9.4 | 0.4% | Oct 13, 2026 | An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an au... |
| CVE-2026-104085 | HIGH | 8.8 | 2.0% | Oct 13, 2026 | odt2spip plugin for SPIP before 4.4.0 contains an OS command injection vulnerability that allows authenticated authors t... |
| CVE-2026-104011 | — | — | — | Oct 13, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-94257. Reason: This candidate is a ... |
| CVE-2025-57739 | HIGH | 8.8 | 0.3% | Oct 13, 2026 | An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] vulnerabi... |
| CVE-2025-46773 | HIGH | 8.8 | 0.3% | Oct 13, 2026 | An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerabi... |
| CVE-2026-94603 | CRITICAL | 10 | 0.9% | Oct 13, 2026 | Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carr... |
| CVE-2026-88838 | MEDIUM | 5.5 | 0.1% | Oct 13, 2026 | A flaw was found in BusyBox's mount utility. A non-root user can bypass mount security restrictions set in /etc/fstab by... |
| CVE-2026-88834 | LOW | 3.7 | 0.2% | Oct 13, 2026 | A flaw was found in BusyBox's httpd web server. When configured with system password authentication, a user existence or... |
| CVE-2026-88833 | MEDIUM | 6.5 | 0.2% | Oct 13, 2026 | A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated pa... |
| CVE-2026-85990 | HIGH | 8.8 | 0.3% | Oct 13, 2026 | Leantime is an open source project management system. Prior to 3.10.0, for the provisionally grouped account-creation an... |
| CVE-2026-85733 | MEDIUM | 5.3 | 0.2% | Oct 13, 2026 | FrankenPHP is a modern application server for PHP. Prior to 1.12.5, the official FrankenPHP Debian and Alpine Docker ima... |
| CVE-2026-82416 | HIGH | 7.7 | 0.2% | Oct 13, 2026 | FrankenPHP is a modern application server for PHP. Prior to 1.12.5, FrankenPHP worker mode can retain PHP session state ... |
| CVE-2026-78799 | CRITICAL | 9.8 | 1.3% | Oct 13, 2026 | Directory Traversal vulnerability in Quanxun Huiju Network Technology (Beijing) Co., Ltd IK-Q3000 Enterprise-grade Wi-Fi... |
| CVE-2026-77459 | CRITICAL | 9.9 | 0.7% | Oct 13, 2026 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and 3... |
| CVE-2026-69227 | CRITICAL | 9.8 | 0.3% | Oct 13, 2026 | A flaw in Portal for ArcGIS allows unauthenticated access to certain Portal Administrator API endpoints under specific... |
| CVE-2026-69226 | MEDIUM | 6.5 | 0.2% | Oct 13, 2026 | A flaw in Portal for ArcGIS allows unauthenticated users to create new accounts through the sharing endpoint even when s... |
| CVE-2026-66057 | MEDIUM | 5.1 | 0.4% | Oct 13, 2026 | Frappe is a full-stack web application framework. Prior to 15.116.0 and 16.29.0, the OAuth login flow uses an unsanitize... |
| CVE-2026-61642 | HIGH | 7.7 | 4.7% | Oct 13, 2026 | Squid is a caching proxy for the Web. From 3.3.0.1 to before 7.6, due to an improper enforcement of behavioral workflow ... |